[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

PiSignage Discovery & Remote

Version 0.8.1 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Developer: pisignage.com

Rating: 5.0 ★ (1 rating)

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 5 total findings.

Findings

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

MEDIUM

Medium-Risk Permission: webview

This extension has the webview permission. Can embed web content in the extension.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

storage
{:fileSystem=>["write", "retainEntries", "directory"]}
unlimitedStorage
notifications
system.network
webview

Embedded URLs (185 total):

http://fontawesome.io	http://fontawesome.io/license
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/2000/svg
http://market.android.com/details?id=com.overlook.android.fing	http://angularjs.org
http://caniuse.com/#search=transition	http://plnkr.co/edit/j8OzgTNxHTb4n3zLyjGW?p=preview
http://en.wikipedia.org/wiki/Representational_State_Transfer	http://example.com:8080/api
http://example.com/resource.json	http://example.com/:id.json
http://example.com/resource/:resource_id.:format	https://developer.mozilla.org/en/http_access_control#section_5
https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#responseType	http://www.ietf.org/rfc/rfc3986.txt
http://tools.ietf.org/html/rfc3986:	http://url.com/id./format?q=x
http://url.com/id.format?q=x	http://erik.eae.net/simplehtmlparser/simplehtmlparser.js
http://dev.w3.org/html5/spec/Overview.html#semantics	http://simon.html5.org/html-elements
http://dev.w3.org/html5/spec/Overview.html#void-elements	http://dev.w3.org/html5/spec/Overview.html#optional-tags
http://angularjs.org/	ftp://127.0.0.1/.
http://angular-ui.github.com/	http://www.opensource.org/licenses/MIT
http://errors.angularjs.org/1.2.25/	http://msdn.microsoft.com/en-us/library/ms537503.aspx
http://jsperf.com/angular-trim-test	http://en.wikipedia.org/wiki/Partial_application
http://en.wikipedia.org/wiki/Currying#Contrast_with_partial_function_application	http://jquery.com
http://api.jquery.com/jQuery/	http://api.jquery.com/addClass/
http://api.jquery.com/after/	http://api.jquery.com/append/
http://api.jquery.com/attr/	http://api.jquery.com/bind/
http://api.jquery.com/children/	http://api.jquery.com/clone/
http://api.jquery.com/contents/	http://api.jquery.com/css/
http://api.jquery.com/data/	http://api.jquery.com/empty/
http://api.jquery.com/eq/	http://api.jquery.com/find/
http://api.jquery.com/hasClass/	http://api.jquery.com/html/
http://api.jquery.com/next/	http://api.jquery.com/on/
http://api.jquery.com/off/	http://api.jquery.com/one/
http://api.jquery.com/parent/	http://api.jquery.com/prepend/
http://api.jquery.com/prop/	http://api.jquery.com/ready/
http://api.jquery.com/remove/	http://api.jquery.com/removeAttr/
http://api.jquery.com/removeClass/	http://api.jquery.com/removeData/
http://api.jquery.com/replaceWith/	http://api.jquery.com/text/
http://api.jquery.com/toggleClass/	http://api.jquery.com/triggerHandler/
http://api.jquery.com/unbind/	http://api.jquery.com/val/
http://api.jquery.com/wrap/	http://docs.angularjs.org/api/angular.element
http://www.quirksmode.org/js/events_mouse.html#link8	http://jsperf.com/angularjs-invoke-apply-vs-switch
http://dev.w3.org/html5/spec/Overview.html#the-indicated-part-of-the-document	http://my.opera.com/community/forums/topic.dml?id=1185462
https://bugzilla.mozilla.org/show_bug.cgi?id=407172	http://www.ietf.org/rfc/rfc2109.txt
http://developers.whatwg.org/webappapis.html#event-handler-idl-attributes	http://bugs.jquery.com/ticket/8335
https://gist.github.com/1649788	https://developer.mozilla.org/en/xmlhttprequest

Page 1 of 3

Raw Manifest

{
  "app": {
    "background": {
      "scripts": [
        "main.js"
      ]
    }
  },
  "name": "PiSignage Discovery & Remote",
  "icons": {
    "16": "icons/icon16.png",
    "128": "icons/icon128.png"
  },
  "author": "Colloqi Consulting (OPC) Private Limited",
  "version": "0.8.1",
  "short_name": "PiAdmin",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "PiSignage Discovery and Remote App.",
  "permissions": [
    "storage",
    {
      "fileSystem": [
        "write",
        "retainEntries",
        "directory"
      ]
    },
    "unlimitedStorage",
    "notifications",
    "system.network",
    "webview"
  ],
  "manifest_version": 2,
  "minimum_chrome_version": "35"
}

by ✦ Astarte

PiSignage Discovery & Remote

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (185 total):

Raw Manifest

Detections

Manifest Findings